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ABSTRACT 

A Stateful Reference Monitor can be loaded into an existing commercial 
operating system, and then can regulate access to many different types of resources. The 
reference monitor maintains an updateable storage area whose contents can be used to 
affect access decisions, and access decisions can be based on arbitrary properties of the 
request. 


